build(deps-dev): bump oxfmt to 0.71.0

[claude]

Requested by David Babenko-Sanders · Slack thread

Bumps oxfmt from 0.67.0 to 0.71.0, the newest release that clears the 7-day yarn age gate. No files needed reformatting.

🤖 Generated with Claude Code

https://claude.ai/code/session_01HGH7qvg6KN4YWnCMqMeQR5

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	oxfmt@​0.67.0 ⏵ 0.71.0	+8		+1	+1

View full report

[claude]

LGTM, a straightforward devDependency version bump.

Reviewed: package.json's oxfmt bump (^0.67.0 → ^0.71.0) and confirmed yarn.lock's 87/87 line diff is fully accounted for by that single change — only oxfmt, its platform binding packages, and its own transitive dependency tinypool (bumped 2.1.2 → 2.2.0 as part of oxfmt's own lockfile entry) are touched. No other packages, source files, or configuration changed.

Extended reasoning...

The diff touches only package.json and yarn.lock, bumping the devDependency oxfmt from ^0.67.0 to ^0.71.0 with a mechanically regenerated lockfile. No application source, tests, or runtime configuration changed, and there is no security-sensitive surface involved. I traced every yarn.lock hunk and confirmed all changes are either oxfmt/its binding packages or tinypool, which is oxfmt's own transitive dependency — nothing unrelated snuck in. This is a simple, self-contained, mechanical change suitable for approval without further human review.